Features

threat modeling, threat, security, secure design, threat modeling, supply chain Codenotary insider threats

To Prevent Supply Chain Attacks, Build Secure Code

Elad Leon | July 18, 2022 | secure code, Software Supply Chain, supply chain attacks

More than a year after the massive SolarWinds cyberattack, targeted companies continue to feel its ramifications in both reputation and financial cost. Moreover, the global software supply chain remains vulnerable to severe ...

Survey Warns of Looming Software Testing Crisis

Mike Vizard | July 15, 2022 | app testing, application vulnerabilities, Automated testing, continuous testing

A survey of CEOs and IT professionals involved in application testing finds a significant gap in terms of how acceptable it is to release software that has not been properly tested. The ...

Deloitte Aligns with Dynatrace for Observability

Mike Vizard | July 15, 2022 | Deloitte, Dynatrace, managed observability platform, observability

Deloitte has expanded its cloud observability practice to include the Dynatrace Software Intelligence platform. Jay McDonald, managing director and co-chair for modern delivery at Deloitte, said the IT services provider will now ...

programming Oracle Java Ansible JFrog embedded language

JFrog Integrates DevOps Portfolio With Microsoft Teams

Mike Vizard | July 14, 2022 | collaboration, communications, jfrog, Microsoft Teams, Slack

JFrog this week announced it has integrated its DevOps portfolio with Microsoft Teams to enhance collaboration. Deep Datta, a senior product marketing manager for JFrog, said JFrog Artifactory repository and the JFrog ...

Red Hat CEO: Out | Blind Users: Revolt | ARM: Google Joins Party

Richi Jennings | July 14, 2022 | accessiBe, accessibility, All things are ready—if our mind be so., ARM, AudioEye, Google Cloud, ibm, Lennart Poettering, Matt Hicks, Paul Cormier, red hat, The Long View, UserWay

In this week’s The Long View: Matt Hicks is the new Red Hat CEO, visual accessibility is in focus, and Google Cloud rolls out ARM instances ...

orca, security, source code, Cycode cloud Atlassian Snyk Security Compass DevSecOps JFrog Trend Micro open source Copado devSecOps OpenSSF

Security Compass Makes Visualizing AppSec Threats Simpler

Mike Vizard | July 14, 2022 | application development, devsecops, secure code, security Compass

Security Compass this week updated its threat modeling platform for developers to make it easier to surface application security issues. The latest version of SD Elements 2022 adds support for developer-centric threat ...

CISA, secure by design, ReversingLabs, open-source, AI, cybersecurity, tooling, CISA Security Scribe ReversingLabs software supply chain cybersecurity - software supply chain security - risks - cyberattacks - Log4J - vulnerabilities

Scribe Security Unveils Pair of Tools to Secure Software Supply Chains

Mike Vizard | July 14, 2022 | devsecops, scribe, Software Supply Chain, software vulnerability

Scribe Security today unveiled a Scribe Integrity tool that scans software artifacts to make sure they comply with IT organizations' security policies before they are integrated into an application. The Scribe Integrity ...

Styra Unfurls Cloud Service for Implementing Compliance-as-Code

Mike Vizard | July 13, 2022 | compliance, compliance-as-code, OPA, Open Policy Agent, Styra

Styra, Inc. today launched an authorization service based on the Open Policy Agent (OPA) software that can be invoked via an application programming interface (API). Torin Sandall, vice president of open source ...

Legit Security syslogs HashiCorp Checkmarx Synopsys Cycode CodeLogic scanning Contrast Security secrets scan dynamic

CodeLogic Toolkit Increases Visibility Into App Dependencies

Mike Vizard | July 12, 2022 | application development, binaries, code scanning, codelogic, runtime

CodeLogic launched today a toolkit that enables developers to scan binaries, runtime application behavior and database connections and then leverage graph technology to identify connections and dependencies in real-time. Brian Pierce, CodeLogic ...

application, tools, vulnerability Backstage Endor Labs Application Development Security vulnerability AppDynamics security vulnerability

Rezilion Launches Vulnerability Prioritization Platform

Mike Vizard | July 12, 2022 | application vulnerabilities, devsecops, Rezilion, vulnerability remediation

Rezilion today announced general availability of a platform that enables DevOps teams to better prioritize remediation efforts by identifying which vulnerabilities both run in memory and actually impact a class or function ...

security, into DevSecOps, AI, DEVSECOPS, CodeOps, DevSecOps, GenAI, security, DevSecOps GitGuardian WhiteSource Automating Security

GitGuardian Tightens Integration With GitHub to Secure Secrets

Mike Vizard | July 11, 2022 | GitGuardian, github, Secrets, secrets management

GitGuardian has expanded its ability to secure code repositories by providing deeper integration with GitHub. Ziad Ghalleb, product marketing manager for GitGuardian, said the results of security scans are now provided in ...

The Quest To Unify With GraphQL, The Modern Data API

Bill Doerrfeld | July 11, 2022 | APIs, data access, data management, GraphQL

There is an ongoing trend in enterprise software: Using GraphQL as an aggregation layer to unify access to underlying data sources and REST APIs. Some call this the supergraph, and others refer ...